High Privilege Vulnerability in Oracle Hospitality Reporting and Analytics

CVE-2020-14594

Summary

A significant vulnerability exists in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications, specifically concerning Inventory Integration. This flaw can be exploited by an attacker with high privileges who has the ability to log on to the infrastructure where the application operates. It allows them to potentially compromise the entire reporting and analytics system. Successfully executing an attack requires the interaction of a separate individual, thus highlighting the importance of user awareness and security protocols. If exploited, the attacker may gain control over the Oracle Hospitality Reporting and Analytics system, posing severe risks to data confidentiality, integrity, and availability.

References